CCPA

The CCPA, or California Consumer Privacy Act, is a state law that grants California residents specific rights over how businesses collect, use, store, and share their personal information. While often associated primarily with consumer data, the CCPA's scope also extends to certain employee and job applicant data, meaning California-based employers need to consider its requirements not just for customers but for their workforce as well. Under the CCPA, covered businesses must provide clear disclosures about what categories of personal information they collect and for what purposes, and in many cases must honor requests from individuals to access, delete, or opt out of the sale of their personal information. The law applies to businesses that meet certain thresholds related to revenue, the volume of personal information processed, or the proportion of revenue derived from selling personal information. Because the CCPA was one of the first comprehensive state-level privacy laws in the United States, it has influenced how many companies approach data privacy more broadly, even outside California, as similar laws have since been adopted in other states. Companies employing California residents, including remote employees, need to ensure their HR data handling practices align with CCPA requirements alongside any other applicable privacy regulations.